How a Trusted-LAN Checkbox Gave a Stranger Root in My Homelab
|12 min read
I run 40+ services behind Traefik. One of them — qBittorrent — trusted my LAN by default. So did my reverse proxy. The internet bypassed my auth, dropped a remote shell, and ran for days before I noticed. Here is what I found, what I changed, and why every homelab with a reverse proxy is one default checkbox away from the same fate.
HomelabSecurityOpinion